ErrTraffic Fueling ClickFix by Breaking the Page Visually and Turns Attack to GlitchFix
ID: 2d4fb5bd-d01f-570e-be1d-0a59be8eba2f
STIX ID: report--2d4fb5bd-d01f-570e-be1d-0a59be8eba2f
Feed Name: cybersecurityNews.com
GlitchFix (ErrTraffic) is a commercialized, cross-platform social-engineering and distribution platform that deliberately breaks web pages to prompt users into installing digitally signed remote management tools or executing obfuscated PowerShell. Researchers found active panels, several hosted domains, dual versions with different obfuscation and delivery modes, and at least one instance exposing full source code; defenders should monitor for errtraffic_session cookies, specific API paths, and unexpected RMM installations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.